Day-two work on a running authentik: monitoring and alerting, log forwarding, backups, scaling workers, and fixing lockouts, forward auth and LDAP sync problems.
Getting back in after a broken flow or lost admin credentials: creating a time-limited recovery key with ak create_recovery_key on Docker or Kubernetes, protecting the link, and fixing the cause.
Watching authentik servers, workers and outposts: live and ready health endpoints, the worker healthcheck command, metrics on port 9300, the example Grafana dashboard and alerts worth setting.
Getting authentik audit events into Splunk, Wazuh, OpenSearch or another SIEM: forwarding container logs with every event, or selected events through notification rules and webhooks, and shortening local retention.
What an authentik backup must include and how to restore it: PostgreSQL dumps or continuous archiving, the /data, /certs, /custom-templates and /blueprints directories, S3 buckets, and restore order.
Scaling authentik with load: the Helm chart's CPU-based Horizontal Pod Autoscaler for servers, KEDA on queued tasks for workers, keeping at least one worker, and worker concurrency.
Fixing redirect loops, 404s on the outpost path and missing headers when authentik sits behind a reverse proxy: checking routes to /outpost.goauthentik.io, cookie domains, trusted proxies and outpost logs.
Diagnosing LDAP or Active Directory syncs that miss users or groups: sync tasks and their logs, property mapping errors, duplicate group names, nested groups and service account permissions.
Finding why logins or the admin interface are slow: slow PostgreSQL queries, connection counts since the Redis removal, poolers and replicas, worker backlog and event retention.
Getting told about failed logins, suspicious requests, impersonation and configuration changes: event matcher policies, notification rules and transports, and the events the hardening guide says to watch.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.